PHP MySQL 表单插入查询

Question

我正在开发这个注册系统，最后我有一个验证码控件。我有错误报告，没有错误出现。输出页面显示验证码成功。虽然我可以在数据库中看到没有数据被插入..

表格:

<h2>Registration Form</h2>
Username:<input type="text" name="username" id="username" size="5" class="username" />
Password:<input type="password" name="password1" id="password" />
Repeat Password:<input type="password" name="password2" id="password" />
Full Name:<input type="text" name="name" id="username" class="username" / >
Mobile/Phone:<input type="text" name="phone" id="username" class="username" />
Email Address:<input type="text" name="email" id="username" class="username" />
<img src="captcha.php"><input type="text" name="vercode" />
<input type="submit" name="register" id="button" value="Sign Up" />

PHP:

include 'db_connect.php';


 if (isset($_POST['submit'])) {

$username = $_POST['username'];
$password1 = $_POST['password1'];
$password2 = $_POST['password2'];
$name = $_POST['name'];
$phone = $_POST['phone'];
$email = $_POST['email'];

if ($username=='')
{
echo 'Please choose an username for yourself.';
exit();
}
    if ($password1=='')
{
echo 'Oops, looks like you forgot to enter the password. Please enter the password.';
exit();
}
    if ($password2=='')
{
echo 'Oops, looks like you forgot to re-enter the password. Please enter the password.>';
exit();
}
    if ($name=='')
{
echo 'Please enter your first and the last name.';
exit();
}
    if ($phone=='')
{
echo 'Please enter your house phone or mobile number.';
exit();
}
    if ($email=='')
{
echo 'Please enter your email address.';
exit();
}

//duplicate Entry Validation
$check_email = "SELECT * FROM users WHERE email='$email'";

$run = mysql_query($check_email);

if(mysql_num_rows($run)>0) {
echo "Alert('Email $email already exist in our database!)";
exit();
}

//Data Insertion
$query = "insert into users (username,password,name,phone,email) value ('$username','$password1','$name','$phone','$email')";

if(mysql_query($query)) {

echo "Registration Successfull";

}

} 


 //Captcha Validation
if ($_POST["vercode"] != $_SESSION["vercode"] OR $_SESSION["vercode"]=='')  {
 echo  '<strong>Incorrect Captcha Code Entered.</strong>';
} else {     
 echo  '<strong>Captcha Verification successful.</strong>';
};
?>

Answer 1

MySQL 已被弃用，您应该改用 MySQLi。试试这个:

PHP:

<?php

/* ESTABLISH CONNECTION */

session_start();

$con=mysqli_connect("YouHost","YouUsername","YourPassword","YourDatabase");

if(mysqli_connect_errno()){

echo "Error".mysqli_connect_error();
}

if (isset($_POST['register'])) { /* THIS SHOULD BE register, BECAUSE YOU NAMED YOUR SUBMIT BUTTON register, NOT submit */

$username = mysqli_real_escape_string($con,$_POST['username']);
$password1 = mysqli_real_escape_string($con,$_POST['password1']);
$password2 = mysqli_real_escape_string($con,$_POST['password2']);
$name = mysqli_real_escape_string($con,$_POST['name']);
$phone = mysqli_real_escape_string($con,$_POST['phone']);
$email = mysqli_real_escape_string($con,$_POST['email']);

/* YOU SHOULD PRACTICE USING ESCAPE_STRING TO PREVENT SOME OF SQL INJECTIONS */

if (empty($username))
{
echo 'Please choose a username for yourself.';
exit();
}
    if (empty($password1))
{
echo 'Oops, looks like you forgot to enter the password. Please enter the password.';
exit();
}
    if (empty($password2))
{
echo 'Oops, looks like you forgot to re-enter the password. Please enter the password.>';
exit();
}
    if (empty($name))
{
echo 'Please enter your first and the last name.';
exit();
}
    if (empty($phone))
{
echo 'Please enter your house phone or mobile number.';
exit();
}
    if (empty($email))
{
echo 'Please enter your email address.';
exit();
}

/* duplicate Entry Validation */
$check_email = "SELECT * FROM users WHERE email='$email'";

$run = mysqli_query($con,$check_email);

if(mysqli_num_rows($run)>0) {
echo "Alert('Email $email already exist in our database!)";
exit();
}

/* Data Insertion. YOU SHOULD ALSO CONSIDER IF THE PASSWORD 1 AND 2 ARE THE SAME */

if($password1==$password2 && !empty($username) && !empty($name) && !empty($phone) && !empty($email)){ /* IF PASSWORD1 IS THE SAME WITH PASSWORD2 */

/* INSERT QUERY */    
$query = mysqli_query($con,"INSERT INTO users (username,password,name,phone,email) VALUES ('$username','$password1','$name','$phone','$email')");

echo "Registration Successfull";

} /* END OF IF PASSWORD1 IS EQUALS TO PASSWORD2 */

else { 
echo "Alert('Password is not the same.')";
exit();
}

/* Captcha Validation */
if ($_POST["vercode"] != $_SESSION["vercode"] OR $_SESSION["vercode"]=='')  {
echo  '<strong>Incorrect Captcha Code Entered.</strong>';
} else {     
echo  '<strong>Captcha Verification successful.</strong>';
};

} /* END OF ISSET SUBMIT */

?>

您的 HTML 文件:

<html>
<body>

<h2>Registration Form</h2>
<form action='YourPHPFile' method='POST'>
Username:<input type="text" name="username" id="username" size="5" class="username" />
Password:<input type="password" name="password1" id="password" />
Repeat Password:<input type="password" name="password2" id="password" />
Full Name:<input type="text" name="name" id="username" class="username" / >
Mobile/Phone:<input type="text" name="phone" id="username" class="username" />
Email Address:<input type="text" name="email" id="username" class="username" />
<img src="captcha.php"><input type="text" name="vercode" />
<input type="submit" name="register" id="button" value="Sign Up" />
</form>

</body>
</html>